General

  • Target

    56b267dda810861979f650e344f25178_JaffaCakes118

  • Size

    48KB

  • MD5

    56b267dda810861979f650e344f25178

  • SHA1

    a4269859e1fedb01a0102290ba799b57facfafbe

  • SHA256

    111bbaf6abb1f24166f5b247e4eeb430d725aa63fcf484536556c5941355b235

  • SHA512

    ffcdfdb7f4b7c3cb0004283a67d39c5205a10a907a78b7170a3d6ec99fa6fa0fe7c837c9d12b64c602677a630459126a0a9270e7555e520b9d40a48ec8679c6a

  • SSDEEP

    768:hIsF81fG9QveLOYTe5YioLHVR2jhi+O+l7kHn8lLmljnn/R9eKw5bifc1TK42idK:hIsFw9veLJToSHX2kR+l768laljn5i7Y

Score
10/10

Malware Config

Signatures

  • Detect XtremeRAT payload 1 IoCs
  • Xtremerat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 56b267dda810861979f650e344f25178_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections